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Amendments to the Claims 

The Hsting of claims will replace all prior versions, and listings of claims in the 
application. 

WHAT IS CLAIMED IS: 

1 . (Currently Amended) A method for approving a security change for a file 
security system that secures electronic files, said m e thod comprising: 

receiving a r e qu e sted request for the security change fi"om a requestor; 

identifying a plurality of approvers to approve or disapprove of the requested 
security change bv accessing an approver set in an approval manager module : 

notifying the approvers of an approval request for the requested security to 
change; 

determining whether the requested security change is approved based on 
responses from the approvers to the approval request; and 

performing the requested security change when said determining determines that 
the requested security change has been approved. 

2. (Currently Amended) A The method as recited in claim 1, wherein said 
notifying of the approvers is achieved by electronic mail. 

3. (Currently Amended) A The method as recited in claim 2, wherein the 
responses from the approval group are provided as electronic mail. 
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4. (Currently Amended) A The method as recited in claim 1, wherein no one 
of the plurality of approvers can individually approve the requested security change. 

5. (Currently Amended) A The method as recited in claim 1 , wherein the 
plurality of approvers are arranged as a set or group. 

6. (Cmrently Amended) A The method as recited in claim 1, wherein the 
plurality of approvers are arranged in a plurality of sets or groups, and 

wherein said determining requires approval from more than one of the plurality 
of sets or groups in order to determine that the requested security change is approved. 

7. (Currently Amended) A The method as recited in claim 6, wherein the 
plurality of sets or groups are arranged in a hierarchy, and wherein progression to a next 
level in the hierarchy requires approval from the set or group associated with a current 
level, 

8. (Currently Amended) A The method as recited in claim 1, wherein the 
plurality of approvers are users of the file security system. 

9. (Currently Amended) A The method as recited in claim 1, wherein the 
plurality of approvers form a set of approvers, and 

wherein said determining determines that the requested security change is 
approved when a subset of the set of approvers approve the requested security change. 
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10. (Currently Amended) A The method as recited in claim 1, wherein the 
plurality of approvers identified by said identifying is dependent on the requested 
security change. 

1 1 . (Currently Amended) A The method as recited in claim 1 , wherein the 
plurality of approvers identified by said identifying is dependent on the requestor. 

12. (Currently Amended) A The method as recited in claim 1, wherein said 
notifying operates to substantially simultaneously notify all of the approvers of the 
approval request for the requested security change. 

13. (Currently Amended) A The method as recited in claim 1, wherein said 
notifying operates to substantially concurrently notify all of the approvers of the 
approval request for the requested security change. 

14. (Currently Amended) A The method as recited in claim 1, wherein the 
electronic files secured by the file security system are electronic documents. 

15. (Currently Amended) A file security system that restricts access to 
secured electronic documents, said fil e security system comprising: 

an access server that restricts access to the secured electronic documents; and 
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an approval manager operatively connected to said access server, wherein said 
approval manager operates a security change approval process to determine whether a 
requested security change is approved^ 

wherein, in operating the security change approval process, a pluraUtv of 
approvers are notified of the requested security change and asked to approve or 
disapprove the requested security change, the plurality of approvers identified by 
accessing an approver set in an approval manager module . 

16. (Currently Amended) A The file security system as recited in claim 15, 
wherein said file security system has one or more system administrators, and wherein 
said approval manager operates the security change approval process without any 
interaction fi*om the one or more system administrators. 

17. (Cancelled) 

1 8. (Currently Amended) A The file security system as recited in claim 47 15, 
wherein the plurality of approvers are notified by notification electronic mail messages. 

19. (Currently Amended) A The file security system as recited in claim 1 8, 
wherein the plurality of approvers approve or disapprove the requested security change 
using reply electronic mail messages. 
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20. (Currently Amended) A The file security system as recited in claim 19, 
wherein the reply electronic mail messages include a digital signature of the associated 
approver to verify authenticity. 

2 1 . (Currently Amended) A The file security system as recited in claim 15, 
wherein no one of the approvers can individually approve the requested security change. 

22. (Currently Amended) A The file security system as recited in claim 4^ 15 , 
wherein the plurality of approvers are arranged as a set or group. 

23. (Currently Amended) A The file security system as recited in claim Jr? 15 , 
wherein the plurality of approvers are arranged into a plurality of sets or groups, and 

wherein said approval manager requires approval fi-om more than one of the 
plurality of sets or groups in order to determine that the requested security change is 
approved. 

24. (Currently Amended) A The file security system as recited in claim 4-7 15 , 
wherein the plurality of sets or groups are arranged in a hierarchy, and wherein 
progression to a next level in the hierarchy requires approval fi"om the set or group 
associated with a current level. 

25. (Currently Amended) A The file security system as recited in claim ¥7- 15 , 
wherein the approvers are users of the file security system. 
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26. (Currently Amended) A The file security system as recited in claim 15, 
wherein the plurality of approvers form a set of approvers, and 

wherein said approval manager determines that the requested security change is 
approved when a subset of the set of approvers approve the requested security change. 

27. (Currently Amended) A The file security system as recited in claim 4-7 15 . 
wherein said approval manager identifies the plurality of approvers dependent on the 
requested security change. 

28. (Currently Amended) A The file security system as recited in claim 15, 
wherein said approval manager identifies the plurality of approvers dependent on the 
requestor. 

29. (Currently Amended) A The file security system £is recited in claim 15, 
wherein said file security system fiuther comprises: 

a key store operatively connected to said access server, said key store stores 
cryptographic keys used to gain access to the secured electronic documents. 

30. (Currently Amended) A tangible computer r e adabl e m e dium data storage 
device including at least computer program code for approving a security change for a 
file security system that secures electronic files, said comput e r readable medium 
comprising: 
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computer program code for notifying a plvirality of approvers of an approval 
request for the requested security chang e, the plurality of approvers identified by 
accessing an approver set in an approval manager module : 

computer program code for determining whether the requested security change is 
approved based on responses from the approvers to the approval request; and 

computer program code for performing the requested security change when said 
determining determines that the requested security change has been approved. 

3 1 . (Currently Amended) A The computer readable medium data storage 
device as recited in claim 30, wherein said notifying of the approvers is achieved by 
electronic mail. 

32, (Currently Amended) A The comput e r r e adabl e medium data storage 
device as recited in claim 31, wherein the responses from the approval group are 
electronic mail. 

3 3 . (Currently Amended) A The comput e r r e adabl e m e diimi data storage 
device as recited in claim 30, wherein no one of the plurality of approvers can 
individually approve the requested security change. 

34. (New) A method for approving a security change for a file security 
system that secures an electronic file, comprising: 

(a) receiving a security change request from a requestor; 
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(b) determining whether the requestor is authorized to perform the requested 
security change; 

(c) receiving an approval request from the requestor, if the requestor is not 
authorized to perform the requested security change; 

(d) based on the receipt of the approval request, performing the steps of: 

(dl) identifying one or more approvers to approve or disapprove of the 
requested security change; 

(d2) notifying the one or more approvers of an approval request for the 
requested security to change; and 

(d3) determining whether the requested security change is approved based 
on responses from the one or more approvers to the approval request; and 

(e) performing the requested security change when the first determining step 
determines that the requestor is authorized to perform the requested security change, or 
when the second determining step determines that the requested security change has been 
approved. 

35. (New) A file security system that restricts access to a secured electronic 

document, comprising: 

an access server that restricts access to the secured electronic document; and 
an approval manager operatively connected to said access server, wherein said 

approval manager determines whether the security change is authorized and, if not, 

operates a security change approval process upon receipt of an approval request to 

determine whether a requested security change is approved. 
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36. (New) A tangible data storage device including at least computer program 

code for approving a security change for a file security system that secures an electronic 

file, comprising: 

computer program code for determining whether the requested security change is 
authorized; 

computer program code for notifying one or more approvers of an approval 
request for the requested security change, if the requested security change is not 
authorized and an approval request is received; 

computer program code for determining whether the requested security change is 
' approved based on responses fi-om the one or more approvers to the approval request; 
and 

computer program code for performing the requested security change when said 
first determining determines that the requested security change is authorized or said 
second determining determines that the requested security change has been approved. 
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